The plugin is simple but contains all of the features I needed in 2FA:
- email
- TOTP
- backup codes
- opt-in per-user
- no dependence on external service provider
Don't forget about the companion Application Passwords plugin!